Wordfence Intelligence   >   Vulnerability Researchers   >   Jerome Bruandet

Jerome Bruandet

Organization: NinTechNet

10
All Time Ranking
212
All Time Discoveries

Showing 61-80 of 212 Vulnerabilities

Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4410
Jun 8, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
4.3
CVE-2021-4402
Jun 8, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4412
Jun 8, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution
8.8
CVE-2021-4382
Jun 7, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Kiwi Social Sharing 2.1.0 - 2.1.2 - Arbitrary Options Change
9.8
CVE-2021-4362
Jun 4, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Controlled Admin Access < 1.5.6 - Privilege Escalation
9.9
CVE-2021-4360
Mar 30, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4392
Mar 21, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting
6.4
CVE-2021-4367
Mar 16, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4407
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4393
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import
8.8
CVE-2021-4373
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4425
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4405
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4413
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4385
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery
8.8
CVE-2021-4349
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4422
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypass
5.4
CVE-2021-4417
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4389
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass
8.8
CVE-2021-4401
Mar 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass CVE-2021-4410 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 8, 2021
Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass CVE-2021-4402 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 8, 2021
WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass CVE-2021-4412 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 8, 2021
Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution CVE-2021-4382 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 7, 2021
Kiwi Social Sharing 2.1.0 - 2.1.2 - Arbitrary Options Change CVE-2021-4362 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 4, 2021
Controlled Admin Access < 1.5.6 - Privilege Escalation CVE-2021-4360 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 30, 2021
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass CVE-2021-4392 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 21, 2021
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting CVE-2021-4367 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 16, 2021
Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass CVE-2021-4407 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass CVE-2021-4393 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import CVE-2021-4373 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H March 1, 2021
Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass CVE-2021-4425 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass CVE-2021-4405 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass CVE-2021-4413 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypass CVE-2021-4385 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery CVE-2021-4349 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H March 1, 2021
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass CVE-2021-4422 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypass CVE-2021-4417 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N March 1, 2021
WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass CVE-2021-4389 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 1, 2021
Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass CVE-2021-4401 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H March 1, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation